$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa File: f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa (raw, json) Hash identifier: kVz38TZy8mncsCx7io3M3457Zf33F9bgd0nePT7As58= Subject key identifier: 41:50:B8:5C:84:1D:8A:D6:A3:53:24:2E:FA:B5:A4:C6:B6:1F:3B:62 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B8DBE6EC36B4D85AC4380 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8d:be:6e:c3:6b:4d:85:ac:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=7c815eaa-bfbc-4fc6-8fd0-046770e9e7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:c4:e9:6b:a7:28:7e:fa:d4:1e:3a:38:c7: 6a:23:da:8b:41:da:19:73:49:61:e2:bf:e6:74:d2: d8:f1:12:5e:6a:a7:ce:a3:be:f7:89:96:94:2b:f8: e1:f5:b1:57:2a:ad:90:3d:7e:27:cb:46:57:d0:36: 6c:9c:0c:f9:50:57:d6:62:9b:df:f4:b8:7d:7c:1f: 57:ce:82:ea:17:9f:89:cf:48:57:f3:83:d5:f5:0e: 54:03:80:6a:e0:89:f5:66:3b:8d:3d:a9:15:d3:70: 5b:47:20:ef:85:71:ac:6f:68:40:85:79:3a:c2:de: 99:3d:e7:7f:8d:97:36:93:9d:f4:73:a4:21:99:89: 34:d8:c2:de:35:0d:42:94:f8:37:7e:72:86:a1:8c: f8:31:f6:37:78:3c:10:0e:96:31:92:d2:65:cd:07: 29:36:20:8c:d2:81:5a:07:91:0a:74:94:e7:3b:2d: ec:2e:40:51:52:7a:a6:2f:9f:ab:64:91:a1:14:3d: 08:27:c5:af:62:6e:1f:43:6e:ab:04:58:64:d4:38: 1f:53:52:46:49:7b:f9:27:46:54:c5:4d:09:d0:fa: b2:72:c6:52:dc:38:5e:32:69:71:d5:74:00:e9:f2: 7b:70:43:5c:f7:e7:b7:5c:f5:40:b2:5e:64:b9:c1: b9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:50:B8:5C:84:1D:8A:D6:A3:53:24:2E:FA:B5:A4:C6:B6:1F:3B:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:18:25:4b:5f:14:69:54:88:7c:38:01:c6:54:ff:b3:63:a8: 28:60:58:3d:71:22:2f:e0:15:f4:b5:91:b5:78:23:fd:02:a4: c9:27:fc:3c:9a:a5:43:1d:49:07:10:b4:e1:a5:a9:3e:66:28: 01:a1:ff:e7:a3:6e:80:03:2c:1d:ec:0a:de:73:dc:b8:7c:3b: 63:71:02:be:95:ee:d8:8f:fa:63:fd:ee:01:ec:22:16:bb:53: 15:95:19:fd:55:c2:46:c8:8d:48:43:4e:bc:23:58:28:2d:94: e0:c1:93:37:f5:ef:48:be:f4:5d:8e:7f:b4:d1:ef:f3:67:ee: db:60:77:c1:43:5b:d5:f0:8e:bd:02:3f:7d:31:06:56:15:1f: c6:75:33:3a:99:4e:2a:3f:0f:e9:0f:55:f4:80:97:e2:d7:b7: ea:84:df:b0:ad:f0:ff:46:dd:7f:b8:38:f5:54:be:81:b8:50: b7:25:b2:01:de:16:8a:9c:9e:cb:86:28:57:fa:db:59:45:91: 2e:08:4e:0d:7d:e3:d8:e4:06:e6:f8:94:39:8d:f7:b4:1c:a2: 68:b4:4e:20:12:0b:e6:ce:e0:97:9b:e8:62:3e:1a:c7:17:99: f0:81:db:b2:d1:eb:2b:64:5e:09:27:9a:48:73:b3:a1:45:50: 60:e6:d8:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e42+bsNrTYWsQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk N2M4MTVlYWEtYmZiYy00ZmM2LThmZDAtMDQ2NzcwZTllN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHrE6WunKH761B46OMdqI9qLQdoZc0lh4r/m dNLY8RJeaqfOo773iZaUK/jh9bFXKq2QPX4ny0ZX0DZsnAz5UFfWYpvf9Lh9fB9X zoLqF5+Jz0hX84PV9Q5UA4Bq4In1ZjuNPakV03BbRyDvhXGsb2hAhXk6wt6ZPed/ jZc2k530c6QhmYk02MLeNQ1ClPg3fnKGoYz4MfY3eDwQDpYxktJlzQcpNiCM0oFa B5EKdJTnOy3sLkBRUnqmL5+rZJGhFD0IJ8WvYm4fQ26rBFhk1DgfU1JGSXv5J0ZU xU0J0PqycsZS3DheMmlx1XQA6fJ7cENc9+e3XPVAsl5kucG5ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFQuFyEHYrWo1MkLvq1pMa2HztiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZjllOTliMjMtNjYwOS0z MTU5LThiOWUtYTI2YTAxMmY4YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMYJUtfFGlUiHw4AcZU/7NjqChgWD1xIi/gFfS1kbV4I/0CpMkn/Dya pUMdSQcQtOGlqT5mKAGh/+ejboADLB3sCt5z3Lh8O2NxAr6V7tiP+mP97gHsIha7 UxWVGf1VwkbIjUhDTrwjWCgtlODBkzf170i+9F2Of7TR7/Nn7ttgd8FDW9Xwjr0C P30xBlYVH8Z1MzqZTio/D+kPVfSAl+LXt+qE37Ct8P9G3X+4OPVUvoG4ULclsgHe FoqcnsuGKFf621lFkS4ITg1949jkBub4lDmN97Qcomi0TiASC+bO4Jeb6GI+GscX mfCB27LR6ytkXgknmkhzs6FFUGDm2DY= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:33 2025 by rpki-client